$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d50a3f68-e668-371e-b9e6-849f6afb60f1.roa File: d50a3f68-e668-371e-b9e6-849f6afb60f1.roa (raw, json) Hash identifier: fl+s/3Huc2Bob/Qcg9LH9yxNpqi+ntVFBvOzUhmNwGA= Subject key identifier: F0:DA:7E:72:FD:4B:C4:C1:1D:5E:22:8D:13:43:A0:FC:CC:C0:35:21 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACCA6844B354EF81B52C299C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d50a3f68-e668-371e-b9e6-849f6afb60f1.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 10515 IP address blocks: 199.7.71.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:84:4b:35:4e:f8:1b:52:c2:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=04940ded-bd25-4c00-8073-7199e5f960d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ee:c0:4d:a7:90:c4:ee:cb:60:f3:41:bb:d7: 45:8b:17:0e:e3:78:f0:89:67:bf:08:d1:79:42:46: 7d:92:25:90:c0:e8:a4:f2:ab:ff:86:a3:70:c1:d3: fb:73:c9:de:a5:dc:11:5d:bb:43:7a:47:09:5f:42: 27:75:e3:2f:02:38:4b:ec:9d:16:6f:78:24:26:13: ce:8e:a8:0f:2b:32:2e:2d:33:2c:53:0b:32:a8:04: 65:36:65:d9:7d:b8:c7:18:b6:53:5f:89:35:bb:b0: 2e:54:f0:3c:c5:75:74:f1:bc:56:69:34:c1:f6:ba: e0:4f:48:36:ac:d1:e7:0b:ad:e8:df:62:39:1b:27: 5f:14:4a:d2:1b:8f:20:17:a7:90:46:3d:99:4d:83: 3c:d9:4a:e8:a7:b4:f1:ed:da:f0:39:d8:69:96:e9: 37:53:94:05:73:c4:99:79:29:75:49:95:52:5c:b2: 03:eb:6e:f3:59:d0:7d:cd:3d:7b:a8:48:34:28:c3: 1c:cd:0f:6c:43:b8:a9:9b:78:f4:b2:c7:78:b2:0c: b7:7c:fe:de:64:14:06:f9:4b:d7:f3:d4:97:69:28: 9a:01:21:58:b9:cf:2d:b7:3e:8e:71:2a:c9:06:5e: 0f:d2:a3:57:2f:8b:ad:aa:98:ad:0e:ef:f2:de:f7: 0d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DA:7E:72:FD:4B:C4:C1:1D:5E:22:8D:13:43:A0:FC:CC:C0:35:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d50a3f68-e668-371e-b9e6-849f6afb60f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:0b:e5:b4:b1:ef:d3:d6:0e:93:53:be:42:35:e7:0d:c4:3a: 64:d5:9f:74:05:8b:92:e8:2c:a0:c9:04:a0:5c:ef:28:9e:be: ec:d0:41:f8:6a:23:23:e5:41:29:81:e5:6c:bd:73:35:3d:0d: 87:d4:8e:03:ea:7c:52:f7:38:eb:01:45:1a:15:41:3c:57:32: 78:82:34:a9:b5:54:ea:5e:ee:66:77:3c:6f:58:94:47:1f:7f: 42:ef:78:82:46:0a:60:1b:d3:92:ce:dc:a6:96:43:09:22:2a: 58:67:15:c8:b0:2f:7f:7b:f5:fd:f4:67:73:c9:fc:18:9c:43: 3c:bf:6c:7a:36:be:71:9b:c0:25:89:0d:f5:2c:88:68:e5:bb: 8a:a1:a7:38:cb:ee:5f:22:30:cb:3e:97:14:a5:86:c3:5d:92: fa:73:f0:6a:a1:ba:a3:e5:4f:69:3b:4d:d0:38:ea:ee:7f:9d: ac:fc:a6:ea:f3:56:7d:6c:92:58:54:10:7e:a9:ab:36:aa:4c: e0:1d:be:f2:cb:8a:20:5f:71:96:6d:10:25:0a:2c:43:61:bf: 83:5b:d9:0e:f4:8b:72:49:65:49:01:80:87:c1:7c:53:e1:7d: 4d:22:08:fb:64:34:4c:77:87:e5:b6:b6:cb:c5:ae:5a:87:38: 85:3c:e1:1a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErMpoRLNU74G1LCmcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk MDQ5NDBkZWQtYmQyNS00YzAwLTgwNzMtNzE5OWU1Zjk2MGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje7ATaeQxO7LYPNBu9dFixcO43jwiWe/CNF5 QkZ9kiWQwOik8qv/hqNwwdP7c8nepdwRXbtDekcJX0IndeMvAjhL7J0Wb3gkJhPO jqgPKzIuLTMsUwsyqARlNmXZfbjHGLZTX4k1u7AuVPA8xXV08bxWaTTB9rrgT0g2 rNHnC63o32I5GydfFErSG48gF6eQRj2ZTYM82Urop7Tx7drwOdhpluk3U5QFc8SZ eSl1SZVSXLID627zWdB9zT17qEg0KMMczQ9sQ7ipm3j0ssd4sgy3fP7eZBQG+UvX 89SXaSiaASFYuc8ttz6OcSrJBl4P0qNXL4utqpitDu/y3vcNowIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPDafnL9S8TBHV4ijRNDoPzMwDUhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDUwYTNmNjgtZTY2OC0z NzFlLWI5ZTYtODQ5ZjZhZmI2MGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBSC+W0se/T1g6TU75CNecNxDpk1Z90BYuS6CygyQSgXO8onr7s0EH4 aiMj5UEpgeVsvXM1PQ2H1I4D6nxS9zjrAUUaFUE8VzJ4gjSptVTqXu5mdzxvWJRH H39C73iCRgpgG9OSztymlkMJIipYZxXIsC9/e/X99GdzyfwYnEM8v2x6Nr5xm8Al iQ31LIho5buKoac4y+5fIjDLPpcUpYbDXZL6c/Bqobqj5U9pO03QOOruf52s/Kbq 81Z9bJJYVBB+qas2qkzgHb7yy4ogX3GWbRAlCixDYb+DW9kO9ItySWVJAYCHwXxT 4X1NIgj7ZDRMd4fltrbLxa5ahziFPOEa -----END CERTIFICATE-----Generated at Sat Aug 23 15:05:39 2025 by rpki-client